Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231372e302f32342d3234203d3e20323731333637.roa
File:                     3230302e33362e3231372e302f32342d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          b55XAYAh/Jj5uw1/nld8de36VgGg79apGnXROoqzeSQ=
Subject key identifier:   88:78:6B:89:4A:2A:6B:82:F8:5E:B1:9E:AE:6E:B6:63:22:7B:2F:AD
Certificate issuer:       /CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
Certificate serial:       46695D161B95948B8ABFFACCF1E9B86A7EDF9653
Authority key identifier: 8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231372e302f32342d3234203d3e20323731333637.roa
Signing time:             Tue 04 Apr 2023 00:29:09 +0000
ROA not before:           Tue 04 Apr 2023 00:24:09 +0000
ROA not after:            Tue 02 Apr 2024 00:29:09 +0000
asID:                     271367
IP address blocks:        200.36.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:69:5d:16:1b:95:94:8b:8a:bf:fa:cc:f1:e9:b8:6a:7e:df:96:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6A024CE45904C9FB14F46F0F2725A783643C0A
        Validity
            Not Before: Apr  4 00:24:09 2023 GMT
            Not After : Apr  2 00:29:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:4e:a9:23:68:2c:0d:19:64:6e:3f:59:b6:
                    43:f8:2b:9d:da:30:36:a9:9a:87:f1:32:ad:11:1b:
                    04:fd:54:76:02:1a:41:e4:ca:52:7b:8d:4c:0c:8b:
                    0e:52:d7:b1:03:a7:11:6c:5d:c5:2e:a1:56:03:b1:
                    9d:63:32:8f:63:3a:3d:c3:91:9c:4c:b7:1a:67:6c:
                    b5:0d:3f:f6:4b:e7:c1:a5:8b:68:85:a4:31:50:c2:
                    33:58:1f:5b:56:08:fc:7b:df:15:f9:5e:a6:3f:02:
                    02:a1:c6:53:07:be:2e:be:c1:fd:f1:6e:01:88:1d:
                    a8:f5:87:63:de:38:22:13:2c:a0:b4:f4:59:f4:9a:
                    85:a0:7e:b3:90:61:87:55:de:0e:f2:e2:6c:fc:3e:
                    be:ea:0e:6b:b2:a3:2c:c1:1c:2f:2d:26:83:f4:75:
                    02:2d:85:97:39:60:a3:fe:41:4c:4c:5f:d8:69:16:
                    63:12:23:f4:88:eb:63:e9:5b:ca:50:0f:85:bc:a3:
                    e9:53:39:da:3f:ba:d2:65:d8:6f:c6:f9:7d:03:6e:
                    c4:25:23:53:05:d5:2d:50:34:fe:f0:c1:55:34:9d:
                    96:04:f7:5a:22:ba:7e:d6:85:4f:e5:42:e9:7f:de:
                    86:1f:ba:2f:34:88:4e:36:bb:3e:e6:1f:c7:6e:e2:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:6B:89:4A:2A:6B:82:F8:5E:B1:9E:AE:6E:B6:63:22:7B:2F:AD
            X509v3 Authority Key Identifier:
                keyid:8A:6A:02:4C:E4:59:04:C9:FB:14:F4:6F:0F:27:25:A7:83:64:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A6A024CE45904C9FB14F46F0F2725A783643C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231372e302f32342d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:35:e1:c9:c5:9e:84:5a:44:ec:50:89:62:8a:93:6e:53:
         f8:7a:3c:95:37:6d:e6:42:9d:73:01:c6:9e:bb:67:ab:e8:88:
         75:af:4c:9c:ba:59:e2:b0:4b:28:84:69:31:f0:4f:73:4f:22:
         2d:a3:84:2b:96:fa:96:46:02:6d:bd:61:62:24:41:09:0c:e0:
         66:9a:c8:6e:4f:a8:0b:8d:d6:2c:d2:ed:2e:58:e1:e4:c6:e3:
         13:ea:28:4b:42:cc:95:e2:16:1e:90:77:3a:04:ae:f7:21:29:
         fc:df:00:e2:50:ef:be:24:ad:74:73:1b:a6:f8:76:1f:2e:e3:
         bc:7d:70:36:53:25:81:f7:30:b4:2b:65:22:18:76:8b:a4:96:
         16:de:dd:93:5a:6e:63:bc:11:5e:7e:86:52:21:5b:83:f4:ca:
         77:a1:50:a3:b6:3f:18:38:77:fe:2e:17:c8:b6:b0:ee:51:8f:
         17:77:e1:95:48:e7:96:23:e6:33:d2:b0:73:c4:a9:da:57:59:
         b6:97:31:14:a3:bf:40:b9:e5:9b:f2:7b:8c:03:07:55:db:bd:
         2e:22:ac:70:6a:26:52:90:cd:0b:40:7e:84:59:53:79:ac:f7:
         c0:34:32:ad:c9:4e:5a:c0:ff:79:87:df:db:35:02:c3:31:cf:
         84:2f:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org